Adrian Cole
Adrian Cole
@JoeKerouac I don't think we have ever not used a current version as the first version of instrumentation. Can you mention why there is an issue with 5.x or why...
for example, old and new dubbo caused a lot of work for the project. Not saying this is like dubbo, but dubbo was one of the most high maintenance and...
thanks @JoeKerouac. If there's a compatability issue with 5 against 4, we can add a maven-invoker-plugin test, but if it should work, let's just stick with 5.x.
nice to see passing tests @JoeKerouac!
note: status is still the same since my last comments, except the license format has now changed and will need to be updated along with past comments here.
marking draft in case upstream accepts a plan forward which is to consider src/it deps "dev dependencies" which would have the same affect of not burdening folks with noise, unless...
https://github.com/aquasecurity/trivy/pull/6213 obviates this
should be fixed in v0.4.3. please comment if this didn't solve it
thanks for explaining your resolution, as it helps the next person!
trying now.. thanks!